peass | dca3a97b464be4a52f3d19fca30dfcc5dcde6d6c5897ee9ce8fafb3fda8c53a6

General

Target
2026-08-15_1f538cdceb213c3a43613b4bdb6e57e5_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
Size 10.7MB
Sample260816-a7hmxsae49
SHA256 dca3a97b464be4a52f3d19fca30dfcc5dcde6d6c5897ee9ce8fafb3fda8c53a6
MD5 1f538cdceb213c3a43613b4bdb6e57e5
SHA1 9cc61a8baa4020ccc149bb7ee4447d766c5fdeb0
SHA512 4e251144c736cdfbdbf084fb6f0d2cec93784bbe64b76fa2a43b81f61cef5a31159079e5bf47d26f7b831fef17b5ac7ccc45ce76749b59ea3ba8f0b411ff2183
SSDEEP 196608:4f5Ti+VBFUcwti7TQlyVN8iNISRTRmW5QOHO:WmiHwtQQlyXOOQOH
TLSH
T110B6D044A2ED0929D6AB0E3D8062023357397706139A8BCBFBCC81581F57FE6D776726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-15_1f538cdceb213c3a43613b4bdb6e57e5_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.7MB
- SHA256 dca3a97b464be4a52f3d19fca30dfcc5dcde6d6c5897ee9ce8fafb3fda8c53a6
- MD5 1f538cdceb213c3a43613b4bdb6e57e5
- SHA1 9cc61a8baa4020ccc149bb7ee4447d766c5fdeb0
- SHA512 4e251144c736cdfbdbf084fb6f0d2cec93784bbe64b76fa2a43b81f61cef5a31159079e5bf47d26f7b831fef17b5ac7ccc45ce76749b59ea3ba8f0b411ff2183
- SSDEEP 196608:4f5Ti+VBFUcwti7TQlyVN8iNISRTRmW5QOHO:WmiHwtQQlyXOOQOH
- TLSH
  T110B6D044A2ED0929D6AB0E3D8062023357397706139A8BCBFBCC81581F57FE6D776726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool spyware stealer trojan persistence privilege_escalation
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2